Re: perl freezed data across network

On Fri, 4 Jun 2004, George Nistorica wrote:

This might be possible, it is using C subroutines and
an insecure open(FILE, $file) call. Depending on whether the C functions
are clean, and how your daemon works.

Sebastian

> I wonder if i freeze a tree of data using Storable, and send it across
> network to a daemon to unfreeze, could a malicious client send it some
> sort of freezed data that could make the daemon run arbitrary code?
> the daemon is written in perl
> 

-- 
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ [email protected] - SuSE Security Team
~